Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/5E2A4C584ED911EAA7F1A521C4F9AE02.roa
File:                     5E2A4C584ED911EAA7F1A521C4F9AE02.roa (raw, json)
Hash identifier:          Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=
Subject key identifier:   75:07:D6:6D:5A:B0:B3:CB:88:03:99:F2:DA:A9:1E:4F:8F:52:2C:E0
Certificate issuer:       /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial:       0B84
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/5E2A4C584ED911EAA7F1A521C4F9AE02.roa
Signing time:             Fri 08 May 2026 19:24:03 +0000
ROA not before:           Fri 08 May 2026 19:24:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139310
IP address blocks:        103.137.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
                          rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2948 (0xb84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
        Validity
            Not Before: May  8 19:24:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe3853-2a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:79:e6:49:4c:41:ad:70:8c:9d:48:2e:48:
                    b9:7d:86:23:6f:3b:22:fc:2f:80:ae:1b:b2:b3:d4:
                    b4:1f:ac:ae:7f:46:a2:b1:d6:e5:bb:79:25:11:06:
                    d3:31:51:a5:97:15:8f:75:89:87:78:23:b3:47:d8:
                    0c:71:c1:80:4c:e2:a4:6d:ed:55:5e:f8:e1:6c:49:
                    ad:68:cb:9f:c8:59:65:82:ba:fe:a2:03:fc:00:a6:
                    fa:1b:3e:64:48:32:e6:37:a6:f4:81:30:68:99:b4:
                    a6:9c:68:13:93:1a:39:58:67:6b:39:54:23:d6:29:
                    59:4d:06:75:2a:d6:52:1e:10:8a:bc:df:c6:78:c8:
                    43:2c:3f:d0:b3:14:3d:f4:aa:52:95:22:51:97:1c:
                    cc:b2:78:e1:2c:71:a0:0d:0a:f4:41:2b:12:f3:a5:
                    8b:ca:ed:96:89:be:59:74:71:6c:6b:c7:04:2e:dc:
                    5f:3d:41:a6:d8:b7:a2:4f:1c:a3:af:02:2f:e6:8e:
                    db:7f:fa:cd:28:c2:d2:1e:90:75:84:8d:85:75:47:
                    7a:18:de:ba:8e:cc:cb:48:a7:d0:40:77:80:f9:e8:
                    30:5a:51:0e:19:34:ef:b0:7e:ca:b8:8f:db:46:f2:
                    6d:a2:b9:23:fd:bb:1b:f8:2d:9d:cd:69:de:76:62:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:07:D6:6D:5A:B0:B3:CB:88:03:99:F2:DA:A9:1E:4F:8F:52:2C:E0
            X509v3 Authority Key Identifier:
                keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/5E2A4C584ED911EAA7F1A521C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:87:8d:29:8f:31:5a:9c:50:c1:5c:05:e2:36:6e:80:73:de:
         ac:3b:9f:36:87:f6:03:12:e8:21:3f:04:50:42:8a:d1:bf:d7:
         da:af:5c:a2:48:83:aa:a2:04:2a:71:d8:21:81:f7:c7:2f:d9:
         25:f1:4e:ce:0c:bb:4b:f2:ac:00:a6:5a:77:f0:4c:09:b3:21:
         48:0e:29:1b:76:56:42:bb:81:5c:da:09:07:67:09:87:7d:ec:
         4a:c6:4c:01:14:57:bc:39:e5:b9:2d:1f:a2:e9:c6:bd:49:81:
         32:ad:0d:38:2f:e7:d8:89:34:6e:c1:ae:02:d9:d0:a9:1b:8f:
         cb:35:93:dd:f9:b8:ae:91:55:53:17:3f:d5:70:3d:57:39:eb:
         bb:05:df:f1:ff:91:fc:90:e4:c1:af:5a:d6:86:e8:55:b3:28:
         53:92:3a:9f:3c:3b:df:f4:60:cd:80:ed:d9:a2:9f:04:5d:e8:
         4f:02:6e:60:f7:d4:6c:25:f6:0a:b6:b6:14:87:ad:64:b8:76:
         a4:63:f2:ab:16:2c:53:1d:03:c0:05:b5:2d:4c:95:89:f2:80:
         9f:41:5a:fb:9f:af:c3:b9:26:0e:32:02:d9:97:31:53:fb:42:
         e3:8c:3b:f0:0c:30:d9:3d:15:29:f7:f6:66:71:99:dd:5b:3d:
         d1:48:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:32 2026 by rpki-client